CVE catalog
CVE-2017-15422
icu: CVE-2017-15422
- Severity
- Medium · CVSS 6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.54% · Oct 25, 2026
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | icu | sid | 78.3-2 | fixed |
| Debian | icu | forky | 78.3-2 | fixed |
| Debian | icu | trixie | 76.1-4 | fixed |
| Debian | icu | bookworm | 72.1-3+deb12u1 | fixed |
| Debian | icu | bookworm-security | 72.1-3+deb12u1 | fixed |
| Cpe | chrome | Not reported | 63.0.3239.84 | fixed |
| Cpe | international_components_for_unicode | Not reported | 60.1 | fixed |
| Cpe | debian_linux | Not reported | Not reported | unknown |
| Cpe | ubuntu_linux | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_desktop | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_server | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_workstation | Not reported | Not reported | unknown |
| Ubuntu | chromium-browser | 14.04 | 29.0.1547.65-0ubuntu2 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 31.0.1650.63-0ubuntu1~20131204.1 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 32.0.1700.107-0ubuntu1~20140204.977.1 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 33.0.1750.152-0ubuntu1~pkg995.1 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 34.0.1847.116-0ubuntu2 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 36.0.1985.125-0ubuntu1.14.04.0~pkg1029 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 37.0.2062.94-0ubuntu0.14.04.1~pkg1042 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 37.0.2062.120-0ubuntu0.14.04.1~pkg1049 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 38.0.2125.111-0ubuntu0.14.04.1.1061 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 39.0.2171.65-0ubuntu0.14.04.1.1064 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 40.0.2214.94-0ubuntu0.14.04.1.1068 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 40.0.2214.111-0ubuntu0.14.04.1.1069 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 41.0.2272.76-0ubuntu0.14.04.1.1076 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 43.0.2357.81-0ubuntu0.14.04.1.1089 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 43.0.2357.130-0ubuntu0.14.04.1.1092 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 44.0.2403.89-0ubuntu0.14.04.1.1095 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 45.0.2454.85-0ubuntu0.14.04.1.1097 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 45.0.2454.101-0ubuntu0.14.04.1.1099 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 47.0.2526.73-0ubuntu0.14.04.1.1106 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 47.0.2526.106-0ubuntu0.14.04.1.1107 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 48.0.2564.82-0ubuntu0.14.04.1.1108 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 48.0.2564.116-0ubuntu0.14.04.1.1111 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 49.0.2623.87-0ubuntu0.14.04.1.1112 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 49.0.2623.108-0ubuntu0.14.04.1.1113 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 50.0.2661.102-0ubuntu0.14.04.1.1117 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 51.0.2704.79-0ubuntu0.14.04.1.1121 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 52.0.2743.116-0ubuntu0.14.04.1.1134 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 53.0.2785.143-0ubuntu0.14.04.1.1142 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 53.0.2785.143-0ubuntu0.14.04.1.1145 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 58.0.3029.81-0ubuntu0.14.04.1172 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 58.0.3029.96-0ubuntu0.14.04.1174 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 58.0.3029.110-0ubuntu0.14.04.1176 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 59.0.3071.109-0ubuntu0.14.04.1186 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 59.0.3071.109-0ubuntu0.14.04.1188 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 60.0.3112.78-0ubuntu0.14.04.1190 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 60.0.3112.113-0ubuntu0.14.04.1194 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 61.0.3163.79-0ubuntu0.14.04.1196 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 61.0.3163.100-0ubuntu0.14.04.1202 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 62.0.3202.62-0ubuntu0.14.04.1204 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 62.0.3202.75-0ubuntu0.14.04.1211 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 62.0.3202.89-0ubuntu0.14.04.1213 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 62.0.3202.94-0ubuntu0.14.04.1215 | vulnerable |
| Ubuntu | chromium-browser | 14.04 | 63.0.3239.84-0ubuntu0.14.04.1 | fixed |
| Ubuntu | icu | 14.04 | 4.8.1.1-12ubuntu2 | vulnerable |
| Ubuntu | icu | 14.04 | 4.8.1.1-13+nmu1 | vulnerable |
| Ubuntu | icu | 14.04 | 4.8.1.1-13+nmu1ubuntu1 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.2 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.3 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.4 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.5 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.6 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.7 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.8 | fixed |
| Ubuntu | chromium-browser | 16.04 | 45.0.2454.101-0ubuntu1.1201 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 47.0.2526.73-0ubuntu1.1218 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 47.0.2526.106-0ubuntu1.1221 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 48.0.2564.82-0ubuntu1.1222 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 48.0.2564.116-0ubuntu1.1229 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 49.0.2623.87-0ubuntu1.1232 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 49.0.2623.108-0ubuntu1.1233 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 50.0.2661.102-0ubuntu0.16.04.1.1237 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 51.0.2704.79-0ubuntu0.16.04.1.1242 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 52.0.2743.116-0ubuntu0.16.04.1.1250 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 53.0.2785.143-0ubuntu0.16.04.1.1254 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 53.0.2785.143-0ubuntu0.16.04.1.1257 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 55.0.2883.87-0ubuntu0.16.04.1263 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 56.0.2924.76-0ubuntu0.16.04.1268 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 57.0.2987.98-0ubuntu0.16.04.1276 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 58.0.3029.81-0ubuntu0.16.04.1277 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 58.0.3029.96-0ubuntu0.16.04.1279 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 58.0.3029.110-0ubuntu0.16.04.1281 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 59.0.3071.109-0ubuntu0.16.04.1289 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 59.0.3071.109-0ubuntu0.16.04.1291 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 60.0.3112.78-0ubuntu0.16.04.1293 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 60.0.3112.113-0ubuntu0.16.04.1298 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 61.0.3163.79-0ubuntu0.16.04.1300 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 61.0.3163.100-0ubuntu0.16.04.1306 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 62.0.3202.62-0ubuntu0.16.04.1308 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 62.0.3202.75-0ubuntu0.16.04.1313 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 62.0.3202.89-0ubuntu0.16.04.1315 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 62.0.3202.94-0ubuntu0.16.04.1317 | vulnerable |
| Ubuntu | chromium-browser | 16.04 | 63.0.3239.84-0ubuntu0.16.04.1 | fixed |
| Ubuntu | icu | 16.04 | 55.1-4ubuntu1 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-6ubuntu1 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.1 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.2 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.3 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.4 | fixed |
| Ubuntu | oxide-qt | 16.04 | 1.9.5-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.10.3-0ubuntu0.15.10.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.10.3-0ubuntu0.15.10.2 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.11.3-0ubuntu3 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.11.4-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.11.5-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.12.5-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.12.6-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.12.7-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.13.6-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.14.7-0ubuntu1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.14.9-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.15.7-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.15.8-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.16.5-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.17.7-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.17.9-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.18.3-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.18.5-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.19.4-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.20.4-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | oxide-qt | 16.04 | 1.21.5-0ubuntu0.16.04.1 | vulnerable |
| Ubuntu | chromium-browser | 18.04 | 61.0.3163.100-0ubuntu1.1378 | vulnerable |
| Ubuntu | chromium-browser | 18.04 | 62.0.3202.62-0ubuntu0.17.10.1380 | vulnerable |
| Ubuntu | chromium-browser | 18.04 | 62.0.3202.89-0ubuntu1.1386 | vulnerable |
| Ubuntu | chromium-browser | 18.04 | 62.0.3202.94-0ubuntu1.1388 | vulnerable |
| Ubuntu | chromium-browser | 18.04 | 63.0.3239.84-0ubuntu1 | fixed |
| Ubuntu | icu | 14.04 | 4.8.1.1-12ubuntu2 | vulnerable |
| Ubuntu | icu | 14.04 | 4.8.1.1-13+nmu1 | vulnerable |
| Ubuntu | icu | 14.04 | 4.8.1.1-13+nmu1ubuntu1 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.2 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.3 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.4 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.5 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.6 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.7 | vulnerable |
| Ubuntu | icu | 14.04 | 52.1-3ubuntu0.8 | fixed |
| Ubuntu | icu | 16.04 | 55.1-4ubuntu1 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-6ubuntu1 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.1 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.2 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.3 | vulnerable |
| Ubuntu | icu | 16.04 | 55.1-7ubuntu0.4 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | icu | source | sid | 57.1-9 | not yet assigned | Not reported | [892766] |
| Debian | icu | source | forky | 57.1-9 | not yet assigned | Not reported | [892766] |
| Debian | icu | source | trixie | 57.1-9 | not yet assigned | Not reported | [892766] |
| Debian | icu | source | bookworm | 57.1-9 | not yet assigned | Not reported | [892766] |
| Cpe | chrome | cpe | Not reported | 63.0.3239.84 | Not reported | NVD-CVE-2017-15422 | Not reported |
| Cpe | international_components_for_unicode | cpe | Not reported | 60.1 | Not reported | NVD-CVE-2017-15422 | Not reported |
| Ubuntu | chromium-browser | deb | 14.04 | 63.0.3239.84-0ubuntu0.14.04.1 | Not reported | UBUNTU-CVE-2017-15422 | Not reported |
| Ubuntu | icu | deb | 14.04 | 52.1-3ubuntu0.8 | Not reported | UBUNTU-CVE-2017-15422 | Not reported |
| Ubuntu | chromium-browser | deb | 16.04 | 63.0.3239.84-0ubuntu0.16.04.1 | Not reported | UBUNTU-CVE-2017-15422 | Not reported |
| Ubuntu | icu | deb | 16.04 | 55.1-7ubuntu0.4 | Not reported | UBUNTU-CVE-2017-15422 | Not reported |
| Ubuntu | chromium-browser | deb | 18.04 | 63.0.3239.84-0ubuntu1 | Not reported | UBUNTU-CVE-2017-15422 | Not reported |
| Ubuntu | icu | deb | 14.04 | 52.1-3ubuntu0.8 | Not reported | USN-3610-1 | Not reported |
| Ubuntu | icu | deb | 16.04 | 55.1-7ubuntu0.4 | Not reported | USN-3610-1 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [icu-devtools]Fixed
Source package: [icu]
Details (4)
72.1-3+deb12u1· amd64 · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· arm64 · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· amd64 · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· arm64 · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
- [icu-doc]Fixed
Source package: [icu]
Details (4)
72.1-3+deb12u1· all · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· all · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· all · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· all · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
- [libicu72]Fixed
Source package: [icu]
Details (4)
72.1-3+deb12u1· amd64 · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· arm64 · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· amd64 · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· arm64 · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
- [libicu-dev]Fixed
Source package: [icu]
Details (4)
72.1-3+deb12u1· amd64 · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· arm64 · bookwormFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· amd64 · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
72.1-3+deb12u1· arm64 · bookworm-securityFixed · Fixed:
57.1-9dsa · icu · debian · bookworm
Observed:
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json]
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_1401-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2017-15422]
- [https://osv.dev/vulnerability/DSA-4150-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2017-15422]
- [https://osv.dev/vulnerability/USN-3610-1]
- [https://security-tracker.debian.org/tracker/CVE-2017-15422]
- [https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-15422.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2017/wid-sec-w-2025-2406.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]